Lucene search
HistoryApr 24, 2015 - 2:59 p.m.
CVE-2015-0297
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:P/A:C
AI Score
7.6
Confidence
High
EPSS
0.005
Percentile
77.0%
Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the (1) ServerInvokerServlet or (2) SchedulerService or (3) cause a denial of service (disk consumption) via the ContentManager.
Affected configurations
Node
redhatjboss_operations_networkMatch3.3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| redhat | jboss_operations_network | 3.3.1 | cpe:2.3:a:redhat:jboss_operations_network:3.3.1:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-0297
2015-04-24 14:00:00
cve
cve
CVE-2015-0297
2015-04-24 14:59:06
prion
prion
Design/Logic Flaw
2015-04-24 14:59:00
CVSS2
9
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:P/A:C
AI Score
7.6
Confidence
High
EPSS
0.005
Percentile
77.0%
Related for NVD:CVE-2015-0297